110 likes | 251 Views
Chapter 10. Monitoring Systems. Monitoring Systems. Most examples here monitor physical systems Alarms PrePayment Meters Taximeters, Tachographs, Truck Speed Limiters. Alarms. Threat Model Who is your attacker See page 209 4 examples Deter – Detect – Alarm – Delay – Respond
E N D
Chapter 10 Monitoring Systems
Monitoring Systems • Most examples here monitor physical systems • Alarms • PrePayment Meters • Taximeters, Tachographs, Truck Speed Limiters
Alarms • Threat Model • Who is your attacker • See page 209 4 examples • Deter – Detect – Alarm – Delay – Respond • Sensors Page 211 • Eliminating false positives • Layers of defenses -- barriers
Attacks • Sensors • Feature interactions • Attacks on Communications • Physical security
Prepayment meters • Purchase one place use it in another location • Protect against forgery and duplication • Petty fraud acceptable risk • Systematic fraud is not • Great study of prepayment meter pages 215-222 • It is cool to read and think about these systems
Taximeters, Tachographs, Speed limiters. • Odometer in cars • Taximeters • Black Boxes • What goes wrong with Tachographs? • 70% procedural • 20% tamper with supply to tachograph • 6% tamper with instrument • hightech
Tachosmart • European Union • Designing smart card based system • Does little to eliminate procedural fraud • Issues of enforcement between countries • Use of GPS units (privacy) • Turnover time to equip trucks • Digital open to additional fraud • Resurrected Duckling
Discussion articles • Prepayment meters • Other uses of Resurrected Duckling
List of Resources • Alarms • http://www.stevenspublishing.com/Stevens/SecProdPub.nsf/frame?open&redirect=http://www.stevenspublishing.com/stevens/secprodpub.nsf/PubHome/180E42469D7AD8A586257145005CE634?Opendocument • http://www.simmons.com.au/perimeter.htm
List of Resources • Alarms and network security • http://www.usenix.org/publications/login/2000-6/features/police.html • Secure Tachographs • http://www.ftp.cl.cam.ac.uk/ftp/users/rja14/tacho.pdf • Tamper resistance • http://www.cl.cam.ac.uk/~rja14/tamper.html
List of resources • Tachosmart • http://www.ntc.gov.au/ViewPage.aspx?page=A02304401400730020 • Resurrected Duckling • http://www.cl.cam.ac.uk/~fms27/duckling/duckling.html • Meter Security • http://www.metering.com/archive/014/25_1.htm